Category: IT|Nov 8, 2018 | Author: Admin

SSD is hacked to pieces - this says Samsung you should do

Share on

This is the list of devices that are not secure.

Security researchers have revealed critical errors in the security of a number of popular SSD disks.

This is the list of devices that are not secure.

Security researchers have revealed critical errors in the security of a number of popular SSD disks.

Physical access to the disk is required
The researchers have found that they can relatively easily modify the firmware, or use a debugger, to change the password in the SSD and thus decrypt content that should initially be encrypted and hidden behind a password.

The problem here is that the error affects highly popular devices like:

  • Samsung 840 Evo
  • 850 Evo
  • Samsung T5
  • T3
  • Crucial MX100
  • MX200
  • MX300

Not difficult with some knowledge
Another problem here is that customers believe that hardware encryption is safer than software, but it's not true in this case simply because the holes are so big and gross:

"We got all the data without knowing any secret," explains researchers Carlo Meijer and Bernard van Gastel of Radboud University in the Netherlands.
In Windows, the problem is even worse when Windows BitLocker software encryption automatically selects hard disk encryption if supported, and can, therefore, be tricked with the same newly discovered tricks.

Disable SSD encryption in Windows
You can disable SSD's hardware encryption from Windows Group Policy:

"Computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Operating System Drives" -find "Configure use of hardware-based encryption for operating system drives".

This makes the companies
Crucial has actually updated the firmware on its disks, while Samsung has more work to do since they have only patched the T3 and T5.

Samsung, therefore, recommends owners of Evo disks to use software encryption instead.

Sponsored Ads:

Comments:


All versions of Windows are exposed

Category: Microsoft|Sep 25, 2021 | Author: Admin

Android's underappreciated upgrade advantage

Category: Google|Sep 24, 2021 | Author: Admin

No Electricity? A New Cooling System Uses Sunlight and Saltwater

Category: General|Sep 23, 2021 | Author: Admin

Slack begins rolling out video and audio message ‘clips’

Category: General|Sep 22, 2021 | Author: Admin

Roku's free OS 10.5 lets you dictate passwords, fixes pesky sound lags on headphones

Category: IT|Sep 21, 2021 | Author: Admin

Some good news and some strange news from Apple

Category: Apple|Sep 20, 2021 | Author: Admin

New Windows security updates break network printing

Category: Microsoft|Sep 19, 2021 | Author: Admin

Sent 700tb over 4 km of laser technology

Category: IT|Sep 18, 2021 | Author: Admin

'Massive' transatlantic data cable landed on beach in Bude

Category: Google|Sep 17, 2021 | Author: Admin

YouTube shuts down Discord music bot ‘Rythm’

Category: Google|Sep 16, 2021 | Author: Admin

Facebook's secret rules differentiate between the "elite" and most people

Category: General|Sep 15, 2021 | Author: Admin

Apple suddenly had to crisis-update the iPhone and Mac

Category: Apple|Sep 14, 2021 | Author: Admin

Epic is blocked forever on all Apple platforms

Category: Apple|Sep 13, 2021 | Author: Admin

NVIDIA To Launch GeForce RTX 30 SUPER ‘Ampere Refresh’ In January 2022, GeForce RTX 40 ‘Ada Lovelace’ GPUs in October 2022

Category: General|Sep 12, 2021 | Author: Admin

3 smart shortcuts for a curiously hidden Chrome OS command

Category: Google|Sep 11, 2021 | Author: Admin
more